Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240220-en -
resource tags
-
submitted
20/02/2024, 21:33
General
-
Target
b9f1afbbadfddaa99da1182adba1961d098f592a154b3f0e991139a20952d28a.exe
-
Size
716KB
-
MD5
13b93c3642655498792d2b52cce4aefd
-
SHA1
a31d0716abfcbe6631b0ab80255d49f67e8d3658
-
SHA256
b9f1afbbadfddaa99da1182adba1961d098f592a154b3f0e991139a20952d28a
-
SHA512
bacdca02f91789ac1bf41508e8889bd54b78fdea296f3216d4143f911e77d1b9ad03564243e9858aa836c2a37e35e7d0bcd73fb3278541cb28dedec5531827e8
-
SSDEEP
12288:90P/aK2vB+giJw/9Rrw0R1u4V/0YG3wx6EcJHUEhPUotFZr+1izHGNe8jKk34z:9kCKABZ/TwSfVcYG3K/cJHlnFR+IGNef
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
-
Drops file in System32 directory 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b9f1afbbadfddaa99da1182adba1961d098f592a154b3f0e991139a20952d28a.exe"C:\Users\Admin\AppData\Local\Temp\b9f1afbbadfddaa99da1182adba1961d098f592a154b3f0e991139a20952d28a.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
661KB
MD5f8b563798430882a4edd183311e6e5be
SHA18367022646b1b3823079c5776ee664bfdbc72fdd
SHA2567b0900fbc84f2e8200d44128ea479754e50e668b3e374a8b4ffc2d0fb5a1c244
SHA5129d05df478ee173f23271bdda0283799c9cda29b0f25b9329798a47afc164bad836fb4090cfc9bde6a6d5e4b36ad9003722ea85ef5b6c1a890a48c1e412181295
-
Filesize
680KB
-
Filesize
680KB
-
Filesize
736KB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
736KB